Lucene search
+L

4588 matches found

OSV
OSV
•added 2024/01/09 7:15 p.m.•14 views

CVE-2024-0341

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

7.5CVSS4.7AI score0.00614EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/09 7:15 p.m.•34 views

CVE-2024-0341

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

7.5CVSS5.1AI score0.00614EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/09 7:15 p.m.•31 views

Path traversal

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

2.7CVSS7.2AI score0.00614EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2024/01/09 6:55 p.m.•3 views

CVE-2024-0341

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

7.5CVSS0.00614EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/09 6:55 p.m.•15 views

CVE-2024-0341 Inis GET Request File.php path traversal

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

3.5CVSS7.6AI score0.00614EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/09 6:55 p.m.•46 views

CVE-2024-0341 Inis GET Request File.php path traversal

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

3.5CVSS7.8AI score0.00614EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•7 views

PT-2024-15477

Name of the Vulnerable Software and Affected Versions Inis versions up to 2.0.1 Description A problematic issue affects the processing of the file /app/api/controller/default/File.php in the GET Request Handler component. The manipulation of the path argument leads to path traversal, specifically...

7.5CVSS5.2AI score0.00614EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•5 views

CVE-2024-0341: Path Traversal: '../filedir'

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The explo...

7.5CVSS5.3AI score0.00614EPSS
SaveExploits0References3
CVE
CVE
•added 2024/01/07 3:31 a.m.•131 views

CVE-2024-0263

CVE-2024-0263 affects ACME Ultra Mini HTTPd 1.21, specifically the HTTP GET Request Handler. The documented issue is a remote, unauthenticated denial of service caused by manipulation of this handler. Several connected sources confirm the impact is DoS and that a patch is recommended to fix the v...

7.5CVSS7.5AI score0.01399EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/01/07 3:31 a.m.•48 views

CVE-2024-0263 ACME Ultra Mini HTTPd HTTP GET Request denial of service

A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

5.3CVSS7.7AI score0.01399EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/07 12:00 a.m.•4 views

CVE-2024-0263: Improper Resource Shutdown or Release

A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

7.5CVSS5.5AI score0.01399EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2024/01/03 12:00 a.m.•318 views

minaliC 2.0.0 Denial Of Service

!/usr/bin/perl use Socket; Exploit Title: minaliC 2.0.0 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 03 january 2024 Vendor Homepage: http://minalic.sourceforge.net/ Download to demo: https://drive.google.com/file/d/1WoDbps6up2s5Xa40YXDSABRU9J17yRQd/view?usp=sharing...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/01/02 12:00 a.m.•23 views

The vulnerability of the SNMP Notification Receiver function in the managers.php script of the Cacti network monitoring software allows a hacker to execute arbitrary SQL code.

The vulnerability of the SNMP Notification Receiver function in the managers.php script of the Cacti network monitoring software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code by sending...

9CVSS8.3AI score0.67338EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/12/25 9:15 a.m.•19 views

CVE-2023-38321

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

7.5CVSS6.8AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2023/12/25 9:15 a.m.•12 views

CVE-2023-38321

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/12/25 9:15 a.m.•41 views

CVE-2023-38321

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

7.5CVSS7.1AI score0.01103EPSS
SaveExploits0References4
Prion
Prion
•added 2023/12/25 9:15 a.m.•37 views

Null pointer dereference

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

5CVSS7.1AI score0.01103EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/25 12:00 a.m.•9 views

CVE-2023-38321: NULL Pointer Dereference

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/25 12:00 a.m.•16 views

PT-2023-26359 · Opennds +1 · Opennds +1

Name of the Vulnerable Software and Affected Versions: OpenNDS versions prior to 4.17.0.12 Description: The issue allows remote attackers to cause a denial of service through a GET request to "/opennds auth/" that lacks a custom query string parameter and client-token, resulting in a NULL pointer...

7.5CVSS7.5AI score0.01103EPSS
SaveExploits0References15
Mend
Mend
•added 2023/12/25 12:00 a.m.•3 views

CVE-2023-38321

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

8.7CVSS0.01103EPSS
SaveExploits0References4
Rows per page
Query Builder